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LIST OF CLAIMS 




(Currently Amended) Method for signing an a live object comprising the 

teps of : 

instantiating a live object in a runtime environment; 

taking \ snapshot of the said live object, wherein the said taking said snapshot 
represents the object at a point of execution is performed by serializing a state of said 
live object ; 

associating a signature with said snapshot; and 

maintaining said association between said snapshot and said signature. 



ef: 



ef: 



2. (Currently Amended) The method of claim 1 further comprising the steps 
verifying said signature; and 

constructing a new object using\aid snapshot, when said signature is verified. 

3. (Currently Amended) The method of claim 1 further comprising th e st e ps 
storing said snapshot in another object; anc 



storing said signature in said another object. 



ef: 



4. (Currently Amended) The method of claim 1 further comprising the stops 
monitoring the a status of said snapshot; and 

invalidating said signature when the said status of said sriapshot changes. 



\ 
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ef: 



5. (Currently Amended) The method of claim 1 further comprising the step 



creafcng said signature using said snapshot. 



6. (Currently Amended) The method of claim 5 further comprising the step 



ef: 




ef: 

associating a ^second signature with said snapshot. 

7. (Currentl AAmended) The method of claim 6 further comprising the stops 
verifying said secondsignature; and 

constructing a new object using said snapshot, when said second signature is 
verified. 

8. (Currently Amended) \M e thod for s e aling an object The method of claim 
1 further comprising the st e ps of : 

generating an encryption key; 

taking a snapshot of th e object, wherein the snapshot represents the obj e ct at a 
point of execution; 

generating an encrypted snapshot of said\snapshot ; 

deleting said snapshot ; and 

associating said signature with said encrypted snapshot, said signature previously 
being associated with said snapshot . 

9. (Currently Amended) The method of claim 8 further comprising! the st e p 
of associating a signature with said snapshot 
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laintaining said association between said encrypted snapshot and said signature 

associates with said encrypted snapshot . 



10. \(Currently Amended) The method of claim 9 further comprising the steps 

ef: 

verifying sffid signature associated with said encrypted snapshot ; and 
constructing anew object using encrypted said snapshot, when said signature 
associated with said encWpted snapshot is verified. 



1 1 . (Currently Amended) A computer program product for signing a live 
object comprising a computer readable medium having recorded thereon: An article of 
manufacturing comprising: 

a computer usable medium having computer readable program code embodi e d 
therein for signing an object comprising: 

computer program code for causing a computer to instantiate a live object in a 
runtime environment; 

computer readable program code configured to caus e computer program code for 



causing a computer to take a snapshot of the said live object by serializing a state of said 

ts the obj e c 



live object wher e in th e snapshot repr e sents the obj e ct at a point of ex e cution ; 

computer readable program code configured to cause computer program code for 
causing a computer to associate a signature with said snapshot; and 



comput e r r e adable program code configured to.causo computer program code for 
causing a computer to maintain said association between said snapshot and said 
signature. 
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]V (Currently Amended) Tho article of manufacture The computer program 

product ofVlaim 11 further comprising: 

comput e r readable program code configured to caus e computer program code for 

causing a computer to verify said signature; and 

computer readable program code configured to cause computer program code for 

V ^^xJ^^ causing a compute\to construct a new object using said snapshot, when said signature is 

verified. 

13. (CurrentlV Amended) The article of manufacture The computer program 
product of claim 11 further comprising: 

comput e r readable program code configured to cause computer program code for 
causing a computer to store said snapshot in another object; and 

computer readable program code configured to cause computer program code for 
causing a computer to store said signature in said another object. 

14. (Currently Amended) vThe articl e of manufacture The computer program 
product of claim 1 1 further comprising* 

computer readable program cod\configured to cause computer program code for 
causing a computer to monitor the a statusyof said snapshot; 

computer readable program code configured to cause computer program code for 
causing a computer to invalidate said signature when the said status of said snapshot 
changes. 

15. (Currently Amended) The article of manufacture The computer program 
product of claim 1 1 further comprising^ 
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-omput e r r e adable program code configured to cause computer program code for 

causing a\omputer to create said signature using said snapshot. 



16. \ (Currently Amended) The article of manufacture The computer program 
product of claim 1 1 further comprising! 

computer r^eadable program code configured to cause computer program code for 
causing a computer to associate a second signature with said snapshot. 



17. (Currentl\ Amended) The article of manufacture The computer program 
product of claim 16 furthervcomprising: 

computer readable program code configur e d to cause computer program code for 
causing a computer to verify sard second signature^ -; and 

computer readable program code configur e d to caus e computer program code for 
causing a computer to construct a\new object using said snapshot, when said second 
signature is verified. 

18. (Currently Amended) An \ articl e — ef — manufacturing The computer 
program product of claim 1 1 further comprising: 

a computer usable medium having comput e r readabl e program code embodied 
therein for s e aling an object comprising: 

computer readable program code configured to cause computer program code for 
causing a computer to generate an encryption key; 

comput e r r e adabl e program code configure^ to caus e a computer to take a 
snapshot of the object, wherein the snapshot represents the object at a point of 
execution; 
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comput e r readable program code configured to caus e computer program code for 

causing a computer to encrypt said snapshot; 

computer r e adable program code configured to caus e computer program code for 

causing a compuW to delete said snapshot ; and 

computer program code for causing a computer to associate said signature with 

said encrypted snapsnot said signature previously being associated with said snapshot . 



19. (Currently\Amended) The article of manufacture The computer program 
product of claim 18 further \omprisingi 

computer r e adable program code configur e d to caus e computer program code for 
causing a computer to decrypt said encrypted snapshot. 



20. (Currently AmendedA Th e article of manufactur e The computer program 
product of claim 18 further comprising^ 

computer readable program code^onfigured to cause a comput e r to associate a 
signature with said snapshot computer program code for causing a computer to maintain 
said association between said encrypted snapshot and said signature associated with said 
encrypted snapshot . 



21. (Currently Amended) The article of manufacture The computer program 
product of claim 20 further comprising: 

computer readable program code configured to^ause computer program code for 
causing a computer to verify said signature associated with said encrypted snapshot ; and 

computer readable program code configured to c\ase computer program code for 
causing a computer to construct a new object using said encrypted snapshot, when said 
signature associated with said encrypted snapshot is verified; 
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22. (Currently Amended) A system configured to sign a» a live object 
existing m a runtime environment, said system comprising: 

a first module of program code executing on a computer configured to take a 
snapshot of m a live object^wherein said the snapshot represents the object at a point of 
e xecution is a\erialization of a state of said live object ; and 

a second\module of program code executing on said computer configured to 
generate a signature using said snapshot; 

said first module configured to monitor the a status of said snapshot, and to 
invalidate said signature when said snapshot is changed. 



23. (Original) \ The system of claim 22 wherein said first and second 
modules are implemented as k second object. 

24. (Original) The\system of claim 23 wherein said snapshot and said 
signature are stored in said secondv object, said second object limiting access to said 
snapshot through one or more methods of said second object. 



25. (Original) The system \>f claim 24 wherein said one or more methods 
of said second object invalidate said signature when said access modifies said snapshot. 



26. (Currently Amended) The system of claim 22 further comprising a 
sealing module comprising: 

a key generation module configured to generate an encryption key; 
an encryption module configured to generate i an encrypted snapshot from said 
snapshot; and 
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letion module configured to delete said snapshot. 

27. (Previously Amended) The system of claim 26 wherein said second 
module is configured t^invoke said key generation module, said encryption module and 
said deletion module. 



28. (Currently Amended) The system of claim 27 wherein said second object 
is configured to verify said signaturevand construct a new object using said encrypted 
snapshot when said signature is verified. 
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